Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/z1xkkOKXFcz5FEKb62GCLA7Knnk.roa
File:                     z1xkkOKXFcz5FEKb62GCLA7Knnk.roa (raw, json)
Hash identifier:          HO5BpkXgvbrzVtK3sjRX6tAG+uWTB0m3oX+u4nUkU/Y=
Subject key identifier:   CF:5C:64:90:E2:97:15:CC:F9:14:42:9B:EB:61:82:2C:0E:CA:9E:79
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0468
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/z1xkkOKXFcz5FEKb62GCLA7Knnk.roa
Signing time:             Thu 13 Apr 2023 09:59:45 +0000
ROA not before:           Thu 13 Apr 2023 09:59:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.120.224.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CF5C6490E29715CCF914429BEB61822C0ECA9E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:80:35:e7:f0:d3:c2:e8:73:0d:98:07:55:
                    22:5c:b8:9c:ee:bc:95:1b:5c:81:a6:9e:af:2c:5f:
                    03:b0:18:ea:9c:d3:18:35:38:08:a0:05:16:48:4f:
                    4c:20:38:66:f8:c4:f6:df:0a:d5:00:ef:bd:1f:bd:
                    b1:9f:d5:10:09:fc:92:52:86:d2:d6:65:c8:0d:33:
                    95:20:f2:e9:be:e1:6e:f1:81:2a:7c:eb:50:4e:81:
                    73:7e:06:f6:52:e7:47:4f:89:e4:f8:e8:bd:fb:f7:
                    fb:fc:94:9d:19:d9:58:bc:11:48:6a:19:03:88:07:
                    7a:9b:50:1b:5c:cb:32:e4:8c:c7:0c:fb:12:ab:a8:
                    76:e8:9d:18:37:d6:d4:49:3f:b4:81:87:36:8e:49:
                    1d:54:e6:3d:6d:eb:29:17:26:f4:f4:b3:63:82:4c:
                    de:7c:27:ab:08:84:e6:08:be:20:94:55:ea:4c:28:
                    60:87:1c:45:d0:7b:80:64:3e:a5:d8:70:47:ef:5e:
                    c3:c8:24:de:c1:91:b3:40:b9:a7:c8:61:29:7c:8b:
                    ba:17:68:60:d0:79:45:81:1f:42:9f:75:a8:aa:51:
                    b6:ba:96:b3:d4:57:2e:45:94:0b:01:13:79:6d:04:
                    5d:f2:3d:29:30:14:1c:a8:2a:a7:7e:ae:4b:c7:68:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5C:64:90:E2:97:15:CC:F9:14:42:9B:EB:61:82:2C:0E:CA:9E:79
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/z1xkkOKXFcz5FEKb62GCLA7Knnk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:a2:8e:7e:d5:dc:ec:ba:ce:de:6c:2d:67:96:4f:9b:af:09:
         8c:b8:33:4c:74:cb:fb:d6:1f:d3:74:3e:c1:92:97:ef:4e:00:
         a9:1f:7f:d3:f0:f5:83:e5:aa:f8:e6:0a:af:da:b9:c0:61:5b:
         27:99:4c:16:ae:07:20:b9:47:01:dd:71:59:ff:69:8d:14:76:
         ae:cb:15:37:9e:63:81:ad:d3:39:95:d9:cc:c6:0b:9a:70:32:
         5d:59:4d:0e:fb:a3:6b:e6:93:35:f3:fa:59:18:8f:b8:b7:76:
         35:fc:fb:13:37:1e:c3:a4:1e:f2:69:23:e9:36:b4:ec:b2:2c:
         03:2c:d5:0e:40:64:09:3f:8a:e8:db:10:49:75:cb:f6:3b:0a:
         68:a1:f3:60:d8:9d:b9:c1:a2:31:a6:93:4e:9c:ea:e1:05:da:
         7e:6f:58:73:1b:7a:e2:93:5a:6a:4d:75:44:74:e8:b6:df:40:
         a3:da:dd:f9:10:87:2c:b7:d4:c5:25:83:e8:29:f8:cf:70:78:
         cc:9d:e5:01:92:78:21:7b:b9:47:38:43:76:c3:34:e8:ba:0a:
         af:80:94:a4:a6:bf:40:b1:22:66:a8:ba:ae:55:2f:6e:35:27:
         27:36:67:cb:59:7d:dd:18:4e:bf:46:3f:fa:19:52:31:a7:c1:
         95:1a:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:05 2025 by rpki-client